Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/ZtBV5uJpR8fWnvOYULFIji763CU.roa
File: ZtBV5uJpR8fWnvOYULFIji763CU.roa (raw, json)
Hash identifier: g9FRycra6q2tac6r10ngXoSEdHMXbVbOQCaMSEw1eq0=
Subject key identifier: 66:D0:55:E6:E2:69:47:C7:D6:9E:F3:98:50:B1:48:8E:2E:FA:DC:25
Certificate issuer: /CN=e9b2d146e58663316fd16d3346b5e623fee8eb6a
Certificate serial: 0182B53045C5C62BB0148B950963D70A86AA
Authority key identifier: E9:B2:D1:46:E5:86:63:31:6F:D1:6D:33:46:B5:E6:23:FE:E8:EB:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bLRRuWGYzFv0W0zRrXmI_7o62o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/ZtBV5uJpR8fWnvOYULFIji763CU.roa
Signing time: Fri 19 Aug 2022 08:20:15 +0000
ROA not before: Fri 19 Aug 2022 08:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57307
IP address blocks: 185.100.148.0/22 maxlen: 24
188.227.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:30:45:c5:c6:2b:b0:14:8b:95:09:63:d7:0a:86:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b2d146e58663316fd16d3346b5e623fee8eb6a
Validity
Not Before: Aug 19 08:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66d055e6e26947c7d69ef39850b1488e2efadc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:f9:2b:cb:db:48:f3:78:79:9f:43:54:bd:
f6:dc:fc:b8:ec:95:7d:c3:aa:01:93:5d:76:93:97:
83:64:2b:61:d8:43:37:3d:59:cd:ab:6b:f0:6a:60:
b6:da:67:ec:1d:d7:6b:c9:4c:e5:78:3f:d4:ea:10:
66:9f:a9:e4:fc:25:9d:9f:88:25:cc:57:1b:28:00:
45:29:3b:6d:2a:ce:10:03:3c:c0:fc:4c:0d:18:cc:
65:18:ef:1d:78:cb:9a:2b:77:36:7e:d7:23:7a:f9:
05:7f:95:01:58:73:2e:b7:49:02:83:53:63:12:03:
f3:23:ab:86:e3:ec:f5:25:8a:0b:af:29:b8:4e:96:
0b:f9:ba:37:b1:1d:da:d3:11:93:6c:ff:dc:fc:bf:
64:5a:93:1c:e6:1c:08:c5:f9:f3:8d:83:9d:59:c5:
14:9c:88:90:73:89:0d:6d:0e:3f:b6:21:7c:9e:f5:
0e:91:33:ed:0e:7f:f3:cb:6b:8a:6c:fa:b0:7f:e2:
e4:8b:97:48:01:d7:e8:87:86:3d:8f:d8:f1:38:1c:
19:4a:18:32:72:59:fb:2e:01:8c:aa:ee:d9:6f:2e:
42:0f:ca:c2:ee:06:2d:11:05:88:54:81:32:b8:d7:
15:a1:0c:09:5f:5d:cc:bd:20:86:05:fa:f5:5d:58:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:55:E6:E2:69:47:C7:D6:9E:F3:98:50:B1:48:8E:2E:FA:DC:25
X509v3 Authority Key Identifier:
keyid:E9:B2:D1:46:E5:86:63:31:6F:D1:6D:33:46:B5:E6:23:FE:E8:EB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bLRRuWGYzFv0W0zRrXmI_7o62o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/ZtBV5uJpR8fWnvOYULFIji763CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/6bLRRuWGYzFv0W0zRrXmI_7o62o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.148.0/22
188.227.240.0/21
Signature Algorithm: sha256WithRSAEncryption
66:22:89:a1:e2:43:4c:ec:2b:e8:f2:1a:76:b4:3a:2e:05:a8:
81:26:f1:db:42:11:d0:99:35:6c:e8:20:6b:5a:65:08:4b:af:
aa:37:ad:d2:2a:9d:62:c8:36:8b:5a:e9:94:33:28:98:d3:60:
88:93:7c:db:f0:fc:19:b3:d4:5e:d3:da:7d:9b:87:7d:9d:4c:
04:dd:e7:8b:86:b6:21:f2:33:60:9d:08:01:87:a9:42:0a:e3:
fb:85:a6:fd:4d:ae:80:40:be:7b:80:4a:66:fa:f1:d0:00:94:
c3:77:88:50:b3:11:0c:62:ac:89:53:c4:74:e0:e5:40:5a:f4:
e4:e5:04:86:e5:5b:a5:b3:ea:78:30:59:a9:50:1c:0c:3e:16:
29:14:cf:4b:ff:95:79:8a:96:93:48:af:27:ed:8c:ad:be:f5:
b3:f5:cd:12:20:bf:39:7e:fa:37:4d:7d:00:c2:5c:90:10:5e:
ed:25:18:a7:3b:4e:94:50:6b:3e:ad:cc:cf:42:9d:8f:0d:cb:
27:8e:33:45:be:2f:d3:b0:02:92:8a:95:3f:fc:cb:cf:f2:3c:
c5:41:28:aa:b7:fd:32:ee:dd:02:b5:62:30:6b:6d:95:ec:e4:
d3:0f:b1:8d:d7:9e:f0:10:15:c9:ab:6e:3a:f7:8b:6f:81:47:
c6:31:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:46 2023 by rpki-client on console-fra.rpki-client.org